I am a self-taught wordpress website designer so pardon my possible ignorance.
A few sites I had worked on for a client were recently defaced by an Indonesian hacker group (fun!). The client had not been updating their wordpress install and a few other things which compromised security.
There are no clean back-ups of the websites unfortunately.
The web host gave me a text file with the result of the malware scan. It looks like a lot of the files that were affected are the nav-menu.php files of the sites.
An example of a result of the scan showing in the text file would be: "[home directory]/[website folder name]/wp-includes/nav-menu.php: SL-PHP-INJECTOR-1-ejw.UNOFFICIAL FOUND"
I understand that deleting the affected files can solve issue and get the account back and running since it was disabled by the host until the issue is mitigated, but I guess deleting this file would break something. Is there something like a standard, clean nav-menu.php file that I can replace these with? And if so, where can I obtain it?